megadev-ai
Warn
Audited by Socket on Oct 20, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
Purpose and capabilities are consistent with a game-AI guidance skill, and the pre-execution findings are false positives from prose. The main concern is install trust: the skill asks users to execute an unpinned, third-party Docker image (`ewrogers/megadev:latest`) that is not clearly the official distribution channel for the cited upstream Megadev project, creating high supply-chain risk without evidence of malicious intent.
Confidence: 90%Severity: 78%
Audit Metadata